TeamOperations · v1.1.0

Legal & Compliance Team

Contract review, GDPR and data protection, EU AI Act classification, policy drafting and vendor risk. Analysis support, not legal advice.

Contract review, GDPR, EU AI Act, internal policy and vendor risk.

Reviews separate blockers from terms that are merely market-standard and unfavourable, and come with redlines you can paste. The AI Act analyst classifies against the actual provisions and maps the obligations that follow.

Analysis support, not legal advice — every output says so.

Agents 5

  1. 01ai-act-analystUse to assess AI systems against the EU AI Act — risk classification, prohibited practice screening, high-risk obligations, GPAI duties, transparency requirements and readiness gap analysis.
  2. 02contract-reviewerUse to review commercial contracts — SaaS agreements, MSAs, statements of work, NDAs, reseller and partnership agreements — flagging risk, missing protections and unusual terms, with suggested redlines.
  3. 03policy-writerUse to draft internal policies and public-facing legal documents — acceptable use, information security, remote work, AI usage, data retention, whistleblowing, terms of service and privacy notices.
  4. 04privacy-advisorUse for data protection work — GDPR lawful basis analysis, records of processing, DPIAs, data processing agreements, international transfers, retention schedules, subject access requests and privacy notices.
  5. 05vendor-risk-assessorUse to assess third-party and supplier risk — security questionnaires, sub-processor review, SaaS due diligence, concentration and continuity risk, and ongoing vendor monitoring.

Skills 2

  1. 01contract-reviewReview a commercial contract systematically and produce severity-ranked findings with suggested redlines. Use when asked to review, check, redline or assess a contract, MSA, SOW, NDA, SaaS agreement or partnership agreement.
  2. 02privacy-assessmentAssess a processing activity or product feature against GDPR — lawful basis, necessity, transparency, retention, transfers, DPIA trigger and rights handling — and produce the documentation. Use for GDPR questions, DPIAs, records of processing, DPAs or privacy reviews of a new feature.

Commands 2

  1. 01/compliance-checkAssess a product, feature or processing activity against GDPR and the EU AI Act, and return a gap analysis with owners and priorities.
  2. 02/review-contractReview a contract and return severity-ranked findings, practical consequences and ready-to-paste redlines.

What this team will not do

It will not tell you something "is compliant" — compliance is demonstrated, not asserted. It will not help classify a system out of a risk tier it belongs in, design processing that evades data subject rights, or claim a certification the company does not hold. When the honest answer is "this needs a lawyer now", it says that instead of producing a confident-sounding document.

€59one-time

→ Colleagues

Also worth hiring

All teams →
Team

Finance & Controlling Team

Driver-based forecasting, unit economics, budget control, receivables and investor reporting for operators.

5 agents · 2 skillsOperations · v1.1.0
€49incl. VATvs €37.5k / month on payroll
Team

Customer Support Team

Ticket triage, reply writing, escalation management, knowledge base authoring and churn prevention, with macro and postmortem workflows.

5 agents · 2 skillsOperations · v1.1.0
€39incl. VATvs €37.5k / month on payroll
Team

People & Recruiting Team

Role scorecards, sourcing, structured screening, interview design and onboarding — evidence-based and non-discriminatory by construction.

5 agents · 2 skillsOperations · v1.1.0